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DETAILED ACTION 

Claims 1-3, 5-16, 19, 20 and 22 are pending. 

This Office Action in response to amendment filed 12/17/2008. 

Below, Examiner has pointed out particular references contained in the prior 
art(s) of record in the body of this action for the convenience of the applicant. Although 
the specified citations are representative of the teachings in the art and are applied to 
the specific limitations within the individual claims, other passages and figures may 
apply as well. Applicant should consider the entire prior art as applicable as to the 
limitations of the claims. It is respectfully requested from the applicant, in preparing 
the response, to consider fully each reference in its entirety as potentially teaching all or 
part of the claimed invention, as well as the context of the passage as taught by the prior 
arts or disclosed by the examiner. 

Response to Arguments 

Applicant's arguments, see After Final, filed 12/17/2008, with respect to the 
rejection(s) of claim(s) 1 under 35 USC 103 have been fully considered and are 
persuasive. Therefore, the rejection has been withdrawn. However, upon further 
consideration, a new ground(s) of rejection is made in view of Weinlander (US 
5,991,858). 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1. Claims 1-3, 5-16, 18-20 and 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Pang et al. (US 6,981,153), hereafter "Pang" in view of Lesea et 
al. (US 6,496,971), hereafter "Lesea" in view of Weinlander (US 5,991,858), 

hereafter "Weinlander". 

Considering Claim 1, Burnham discloses a system of securely using decryption 
keys during Programmable Logic Device (PLD) configuration (column 2- lines 35-45), 
comprises: a key storage register coupled to the microcontroller for storing key data 
(Fig. 10A, column 15, lines 14-23, Lesea- column 4- lines 17-24); a decryptor coupled to 
the key storage register (Fig. 3- item 24), wherein only the decryptor can read from the 
key storage register (column 13- lines 37-56, column 16- lines 27-33, Fig. 8, Fig. 9); and 
a configuration data register in the PLD (Fig. 3, column 11- lines 44-56), wherein the 
configuration data register cannot be read by the microcontroller after the decryptor is 
used (column 14- lines 18-38). 

Pang does not explicitly disclose a microcontroller within the PLD for receiving an 
encrypted bitstream. 

Lesea discloses a microcontroller within the PLD for receiving an encrypted bitstream 
(column 4- lines 12-25). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify the teachings of Pang by a microcontroller 
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within the PLD for receiving an encrypted bitstream as taught by Lesea in order to 
support multiple configuration modes (Lesea- column 2- lines 57-58). 
The combination does not explicitly disclose the decryptor is a software decryptor stored 
in a memory and executed by the microcontroller, wherein the system further comprises 
hardware that selectively enables access to the key storage register by allowing the 
microcontroller access when a program counter of the microcontroller specifies an 
address within an address range corresponding to the software decryptor within the 
memory. 

Weinlander discloses the decryptor is a software decryptor stored in a memory and 
executed by the microcontroller, wherein the system further comprises hardware that 
selectively enables access to the key storage register by allowing the microcontroller 
access when a program counter of the microcontroller specifies an address within an 
address range corresponding to the software decryptor within the memory (column 6- 
lines 5-12). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify the combination by hardware that selectively 
enables access to the key storage register by allowing the microcontroller access when a 
program counter of the microcontroller specifies an address within an address range 
corresponding to the software decryptor within the memory in order to provide further 
safegaurds in data protection (Weinlander- column 4- lines 20-31). 

Considering Claim 2, the combination discloses the microcontroller stores key 
data in the key storage register, but the microcontroller cannot read from the key 
storage register (Pang- column 15- lines 39-40 and 58-66, column 16- lines 27-33). 
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Considering Claim 3, the combination discloses the decryptor is a hardware 
decryptor embedded in an integrated circuit along with the PLD (Pang- column 13- lines 
37-56, Fig. 3- item 24). 

Considering Claims 5, 10, the combination discloses the memory is a ROM 
having a decryption engine (Lesea- column 3- lines 7-12, column 4- lines 17-25)- 

Considering Claim 6, the combination discloses the microcontroller further 
receives a configuration boot program comprising the decryptor in programmatic form 
along with the encrypted bitstream comprising encrypted configuration data to be 
loaded into the configuration data register (Lesea- column 8- lines 33-55, Pang- column 
1- lines 31-38 and 52-58). 

Considering Claim 7, the combination discloses the microcontroller, the key 
register, the decryptor, and the configuration data register are all within the PLD (Pang- 
Fig. 3). 

Considering Claim 8, the combination discloses the microcontroller is an 
emulated microcontroller in the PLD (Pang- column 5- lines 47-64). 

Considering Claim 9, the combination discloses a system of securely using 
decryption keys during configuration of an integrated circuit having programmable logic 
(Pamg- abstract, column 2- lines 35-45), comprising: a microcontroller within the 
integrated circuit for receiving an encrypted bitstream (Lesea- column 4- lines 15-25, 
Pang- column 5- lines 47-64); a key storage register coupled to the microcontroller for 
storing key data (Pang- Fig. 10A, column 15, lines 14-23); a decryption program stored 
in a memory that uses a predetermined memory address to enable access to the key 
storage register (Pang- column 12- lines 36-47); and a configuration data register in the 
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integrated circuit (Pang- Fig. 3, column 11- lines 44-56), wherein the configuration data 
register cannot be read by the microcontroller after the decryption program is used 
(Pang- column 11- lines 44-56, column 14- lines 18-38); wherein access to the key 
storage register by the microcontroller is allowed only when a program counter of the 
microcontroller specifies an address within an address range corresponding to the 
decryption program in the memory (Weinlander- column 6- lines 5-12).. 

Considering Claim 11, the combination discloses the microcontroller further 
receives a configuration boot program along with the encrypted bitstream (Lesea- 
column 8- lines 32-55). 

Considering Claim 12, the combination discloses a method of securely using 
decryption keys during field programmable gate array configuration (Pang- abstract- 
column 2- lines 35-45), comprising the steps of: receiving an encrypted bitstream at a 
microcontroller within the field programmable gate array (Lesea- column 4- lines 15-25, 
Pang- column 5- lines 47-64); loading a decryptor with data from a key register (Pang- 
column 13- lines 37-55); loading the decryptor with data from the microcontroller 
(Pang- column 13- lines 37-56); and loading a configuration data register with a 
decrypted bitstream from the decryptor (Pang- column 14- lines 18-38), wherein the 
configuration data register cannot be read by the microcontroller after the decryptor is 
used (Pang- column 14- lines 18-38) selectively enables access to the key storage register 
by allowing the microcontroller access when a program counter of the microcontroller 
specifies an address within an address range corresponding to the software decryptor 
within the memory (Weinlander- column 6- lines 5-12). 
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Considering Claim 13, the combination discloses the step of loading the key 
register with key data from the microcontroller (Pang- column 15- lines 39-40 and 58- 
66). 

Considering Claim 14, the combination discloses the configuration data register 
cannot be read by the microcontroller while the decryptor is used (Pang- column 14- 
lines 18-33). 

Considering Claim 15, the combination discloses the microcontroller cannot 
read from the key register (Pang- column 15- lines 39-40 and 58-66, column 16- lines 
27-33). 

Considering Claim 16, the combination discloses only the decryptor can read 
from the key storage register (Pang- column 13- lines 37-55, column 15- lines 59-66, 
column 16- lines 27-33). 

Considering Claim 18, the combination discloses a system of securely using 
decryption keys during programmable logic device configuration (Pang- abstract, 
column 2- lines 35-45), comprises: a memory-mapped key register coupled to a 
microcontroller data bus (Pang- column 15- lines 14-23); a decryptor engine stored in 
non-volatile memory and coupled to the microcontroller data bus (Pang- column 13- 
lines 37-55); and logic circuitry limiting access to the key register from the 
microcontroller data bus using specified addresses of the non-volatile memory 
corresponding to the decryptor engine and a received program counter value of a 
microcontroller (Weinlander- column 6- lines 5-12). 

Considering Claim 19, the combination does not explicitly disclose the logic 
circuitry uses specified addresses of the non-volatile memory by limiting access to 
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minimum and maximum ROM memory addresses using the microcontroller program 
counter (Weinlander- column 6- lines 5-12). 

Consdering Claim 20, the combination discloses a computer-readable usable 
medium comprising instructions written thereon in the form of a bitstream that 
configures a programmable logic device (Pang- abstract, column 2- lines 35-45), the 
computer- readable usable medium comprising: a configuration boot program portion 
of the bitstream that runs a microcontroller on the programmable logic device (Lesea- 
column 8- lines 32-55); and an encrypted bitstream portion of the bitstream containing 
encrypted configuration data that when decrypted and loaded into a configuration data 
register on the programmable logic device configures the programmable logic device 
(Lesea- column 8- lines 33-55, Pang- column 2- lines 35-45), wherein the configuration 
boot program further comprises instructions for a decryptor (Pang- column 13- lines 37- 
56), wherein the configuration boot program stores the instructions for the decryptor 
Pang- column 2- lines 35-45), selectively enables access to the key storage register by 
allowing the microcontroller access when a program counter of the microcontroller 
specifies an address within an address range corresponding to the software decryptor 
within the memory (Weinlander- column 6- lines 5-12). 

Considering Claim 22, the discloses the configuration boot program comprises 
instructions for a decompressor (Lesea- column 2- lines 12-25, column 8- lines 15-20). 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Randal D. Moran whose telephone number is 571-270- 
1255. The examiner can normally be reached on M-F: 7:00 - 4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/R. D. M./ 

Examiner, Art Unit 2135 

01/05/2009 

/KimYenVu/ 

Supervisory Patent Examiner, Art Unit 2135 



